Re: URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0

[Brandon S. Allbery KF8NH]

On Friday, July 20, 2001 19:11:02 -0700, Dan Kaminsky <[EMAIL PROTECTED]> 
wrote:
+-----
| The big issue here, of course, is not that sshd incorrectly checks the
| cryptographic hash of an inadequately sized password but that it checks it
| at all.  NP, as far as I know, specifically stands for No Password
| (acceptable, *not* needed), and !! I believe has the same meaning for
| Linux(! for "no").  SSHD has traditionally when possible directly tested
+--->8

Is it me, or is this the *same* bug that was found in the 1.2.x code some 
time back?


-- 
brandon s. allbery  [os/2][linux][solaris][freebsd]   [EMAIL PROTECTED]
system administrator   [JAPH][WAY too many hats]        [EMAIL PROTECTED]
electrical and computer engineering                                   KF8NH
carnegie mellon university     [linux: proof of the million monkeys theory]